Aller au contenu

Vulnérabilités de Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-41097 Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security… 6.7 Moyenne 12 mai 2026
CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability 7.4 Élevée 12 mai 2026
CVE-2026-40403 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally 8.8 Élevée 12 mai 2026
CVE-2026-40401 Windows TCP/IP Denial of Service Vulnerability 7.1 Élevée 12 mai 2026
CVE-2026-40398 Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-32209 Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature… 4.4 Moyenne 12 mai 2026
CVE-2026-40397 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 Élevée 12 mai 2026
CVE-2026-40382 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-34340 Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally 7.0 Élevée 12 mai 2026
CVE-2026-34341 Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally 7.0 Élevée 12 mai 2026
CVE-2026-34339 Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny… 5.5 Moyenne 12 mai 2026
CVE-2026-34337 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-34338 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-34336 Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-34334 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows… 7.8 Élevée 12 mai 2026
CVE-2026-33838 Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-33837 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-33835 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-42825 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.0 Élevée 12 mai 2026
CVE-2026-32170 Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally 6.7 Moyenne 12 mai 2026
CVE-2026-32161 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi… 7.5 Élevée 12 mai 2026
CVE-2026-41096 Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network 9.8 Critique 12 mai 2026
CVE-2026-41095 Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally 7.8 Élevée 12 mai 2026
CVE-2026-41089 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network 9.8 Critique 12 mai 2026
CVE-2026-41088 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.8 Élevée 12 mai 2026

Autres produits Microsoft